diff --git a/.github/workflows/keyless-sign.yml b/.github/workflows/keyless-sign.yml
index 5810336..ba0a98f 100644
--- a/.github/workflows/keyless-sign.yml
+++ b/.github/workflows/keyless-sign.yml
@@ -33,7 +33,7 @@ jobs:
           platforms: linux/amd64
           push: true
           tags: |
-            ghcr.io/lukehinds/cosign-oidc:${{ github.sha }}
+            ghcr.io/lukehinds/cosign-oidc:latest
       - name: Sign image
         run: |
-          cosign sign ghcr.io/lukehinds/cosign-oidc:${{ github.sha }}
+          cosign sign ghcr.io/lukehinds/cosign-oidc:latest